Improvement Of UCON Model And Its Application In The Cloud Storage Access Control System

With the rapid development of cloud computing, a growing numbers of researchers begin to pay close attention to the cloud security issues. Users can obtain their data at anywhere any time, which is the most important features of cloud computing. However, such data sharing model has also led to higher risk in data security. At the same time, new challenges on access control emerge with this new computing environment. Traditional access control model is not support in the process of access control for dynamic authorization. Usage control is presented and has been considered as the next generation control model with features like attribute mutability and continuity of control. But in a cloud environment, UCON also has many shortcomings. It is an important thing that designing a security access control mode in a cloud environment.We improved the attributes of UCON:making role as an attribute of subject, simplifies the definition of the authorization rules; making tenement as an attribute of subject; proposing the concept of a temporary property. In this thesis, the session will be introduced into the UCON, making the features of the UCON(continuity of control) more obvious. Finally, we also implemented a cloud storage system based on HDFS. The system uses UCON model for access control. Taking into account the case of huge number of users, we build a service cluster, use load balancing and distributed caching system to improve system performance, and design a set of message passing mechanism to ensure system scalability. The results of the experimental show that the storage system can isolate different user’s data and can control the on-going access.